[22564] in Kerberos
Re: Auth problem while interop with win2k3
daemon@ATHENA.MIT.EDU (Tom Yu)
Fri Sep 24 09:31:25 2004
To: kerberos@mit.edu
From: Tom Yu <tlyu@mit.edu>
Date: Fri, 24 Sep 2004 09:30:15 -0400
In-Reply-To: <zOU4d.42574$Ot3.40037@twister.nyc.rr.com> (Jeffrey Altman's
message of "Fri, 24 Sep 2004 12:54:55 GMT")
Message-ID: <ldvr7orokuw.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Errors-To: kerberos-bounces@mit.edu
>>>>> "jaltman2" == Jeffrey Altman <jaltman2@nyc.rr.com> writes:
jaltman2> It does not make much sense that the KDC is issuing
jaltman2> a ticket protected by 3DES when 3DES is not in the list
jaltman2> of supported enctypes provided in the AS_REQ.
The "tkt" enctype is that used by the service to decrypt the ticket.
It doesn't matter that the client doesn't understand it (though there
was a bug in our early client code -- krb5-1.0.x? -- that would cause
a client to reject a ticket whose enctype it didn't understand).
---Tom
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
